BI4 Status Alert question

[Wrathwielder]

Hey everyone!

I have status alert notifications in BI4 set like this to only send alerts for Remote Access:

Why am I constantly getting email alerts like this regarding "Server" connecting:
2/7/2023 9:21:45 AM Server: Connected: 106.75.61.46 (7)

I get these all the time and it's annoying. I only have Remote Access checked and this is not remote access via the web - what is it? The IP's are always different which scares me a little.

Here are the log entries for these:

This is what a Remote Access alert looks like when I actually connect to BI over the web:
2/7/2023 11:57:57 AM Greg: 10.212.134.100: Login (0)

Any help would be appreciated - my overpopulated INBOX thanks you

-Greg

[TimG]

BI5 has changed a lot from then, so I don't recognise the menu.

I only have Remote Access checked and this is not remote access via the web - what is it? The IP's are always different which scares me a little.

If you only have remote access checked, why do you think those addresses are not remote ? We often see unknown IP addresses port scanning BI5, but BI5 tells us they were connected for 0 seconds and viewed 0 frames.

WHOIS tells me:

75.73.251.168 is Comcast
198.235.24.141 is Palo Alto networks
45.55.0.13 is Digitalocean

When it happened to me they were mainly from China, so I isolated BI5 from the internet and installed OpenVpn. Time to get your tin foil hat fitted

[Wrathwielder]

Hi!

Thanks for the response!
It's not that I don't think they are remote really, it's just that they appear with "Server" instead of user name that would normally show if it was a normal web login...and it says CONNECTED which to me indicates that it was successfully connected and logged in...!
Maybe "connected" doesn't mean they successfully logged in, but I'm curious what "Server" indicates?

-Greg